Cybersecurity | Tech AI Latest https://techailatest.news/cybersecurity AI and security from both sides: attacks that use AI, deepfake fraud, prompt injection and jailbreaks, model and data leaks, vulnerabilities in AI tools, and the security products built to stop them. Stories cite the researcher, vendor or agency that disclosed the issue, and link to the advisory or paper. en Wed, 28 Oct 2026 15:33:48 GMT https://techailatest.news/icon-512.pngCybersecurity | Tech AI Latesthttps://techailatest.news/cybersecurity Anthropic says Claude found exploit chains in Chrome, Safari, Android, Windows and Linuxhttps://techailatest.news/cybersecurity/anthropic-claude-exploit-chains-chrome-linux-windowshttps://techailatest.news/cybersecurity/anthropic-claude-exploit-chains-chrome-linux-windowsTue, 27 Oct 2026 09:00:00 GMTTech AI LatestCybersecurityAnthropic said on 27 October 2026 that an internal Claude model built exploit chains for Chrome, Safari, Android, Windows and Linux; Google fixed 62 CVEs.Anthropic's Frontier Red Team reported on 27 October 2026 that an unreleased internal Claude model found and chained vulnerabilities in widely used software. The post describes a one-click Chrome remote code execution chain, a Safari same-origin bypass, a Pixel 9 lock screen bypass, a Windows kernel remote denial of service and a zero-click Linux root exploit. Google assigned 62 CVEs fixed in Chrome 156. All issues went through coordinated disclosure.

Read the full story

]]> Cloudflare discloses Workers AI bug that leaked other users' data in 155 GLM 5.3 responseshttps://techailatest.news/cybersecurity/cloudflare-workers-ai-glm-kv-cache-exposurehttps://techailatest.news/cybersecurity/cloudflare-workers-ai-glm-kv-cache-exposureMon, 26 Oct 2026 22:01:23 GMTTech AI LatestCybersecurityCloudflare says a KV cache bug in its GLM 5.3 Workers AI deployment put other customers' data into 155 responses between 27 August and 9 September.Cloudflare disclosed on 26 October 2026 that its GLM 5.3 model on Workers AI leaked data across customers. Between 27 August and 9 September, 155 responses to prompts longer than 681,280 tokens contained text from other users' recent requests. A researcher reported it through HackerOne on 8 September. Cloudflare pulled the model the next day, fixed its configuration and the SGLang inference engine, and says it found no evidence of deliberate exploitation.

Read the full story

]]> Microsoft says China-aligned Storm-0940 used ARTEX AI agents to reach 2,250 tenantshttps://techailatest.news/cybersecurity/microsoft-storm-0940-artex-agentic-ai-connectwisehttps://techailatest.news/cybersecurity/microsoft-storm-0940-artex-agentic-ai-connectwiseWed, 21 Oct 2026 18:23:55 GMTTech AI LatestCybersecurityMicrosoft said on 21 October 2026 that Storm-0940 used ARTEX AI agents in the ConnectWise compromise, gaining privileged cloud access in under 3 hours.Microsoft Threat Intelligence reported on 21 October 2026 that Storm-0940, a China-state aligned actor, has used the open-source agentic AI penetration testing framework ARTEX since September 2026 against hundreds of organisations. Microsoft assesses the group was behind the ConnectWise supply chain compromise, after which its agents tried to sign in to more than 2,250 Microsoft 365 tenants. In several cases, the time from targeting to privileged cloud access was under three hours.

Read the full story

]]> INTERPOL launches deepfake scam campaign with three AI-generated videos and a safe-word tiphttps://techailatest.news/cybersecurity/interpol-deepfake-scams-awareness-campaignhttps://techailatest.news/cybersecurity/interpol-deepfake-scams-awareness-campaignMon, 19 Oct 2026 09:00:00 GMTTech AI LatestCybersecurityINTERPOL launched a public campaign on 19 October 2026 warning that AI deepfakes now target ordinary people through fake calls, romance and investment scams.INTERPOL launched a public awareness campaign on AI deepfake scams on 19 October 2026 from its Singapore base. Three short videos, themselves AI-generated, show how cloned faces and voices are used in investment, impersonation and romance scams against private citizens. The slogan is Wait. Validate. Don't take the bait. INTERPOL lists red flags, advises families to agree a safe word and tells businesses to add multi-step checks for payments.

Read the full story

]]> FBI warns scammers use AI voices and images to impersonate candidates before the 2026 midtermshttps://techailatest.news/cybersecurity/fbi-midterm-election-scams-ai-voice-impersonationhttps://techailatest.news/cybersecurity/fbi-midterm-election-scams-ai-voice-impersonationThu, 15 Oct 2026 09:00:00 GMTTech AI LatestCybersecurityThe FBI warned on 15 October 2026 that scammers use AI-generated voices, images and messages to impersonate candidates and campaigns ahead of the US midterms.The FBI's Internet Crime Complaint Center issued a public service announcement on 15 October 2026 warning that scammers will exploit the US midterm elections. It says criminals use AI tools to generate realistic voices, images and messages that impersonate candidates, campaigns, government bodies and trusted contacts. Named schemes include fake campaign investment pools, scam PACs, non-delivered merchandise and fake voter registration pages. A 16 October alert adds that deepfake video and audio support phishing of election officials.

Read the full story

]]> Google says monthly CVE disclosures doubled in 2026 as AI finds more serious bugshttps://techailatest.news/cybersecurity/google-gtig-ai-vulnerability-discovery-exploitation-trendshttps://techailatest.news/cybersecurity/google-gtig-ai-vulnerability-discovery-exploitation-trendsWed, 30 Sep 2026 14:00:00 GMTTech AI LatestCybersecurityGoogle threat analysts said on 30 September 2026 that monthly CVEs rose from 5,045 to 10,740 this year and that half of AI-found bugs lead to code execution.Google Threat Intelligence Group reported on 30 September 2026 that monthly vulnerability disclosures doubled from 5,045 in January 2026 to 10,740 in August. Exploited vulnerabilities rose from 10.5 a month in 2025 to 18 a month in 2026, while zero-days rose more slowly. Bugs found by AI skew to higher risk: 50% lead to remote code execution, against 26% overall. GTIG also counted over 1,500 AI-stack CVEs so far in 2026.

Read the full story

]]> Microsoft tracks AI-assisted CEO impersonation emails seeking $50,000 from finance teamshttps://techailatest.news/cybersecurity/microsoft-ai-assisted-ceo-impersonation-invoice-fraudhttps://techailatest.news/cybersecurity/microsoft-ai-assisted-ceo-impersonation-invoice-fraudThu, 10 Sep 2026 17:23:05 GMTTech AI LatestCybersecurityMicrosoft said on 10 September 2026 that a fraud campaign of over a million emails used AI-built templates, fake CEOs and a forged ServiceNow invoice.Microsoft Threat Intelligence reported on 10 September 2026 that a campaign sent more than a million fraudulent emails between 3 and 5 August, 87.7% of them to US users. The messages impersonated chief executives of the targeted companies, attached a fabricated ServiceNow invoice and a fake forwarded thread, and asked accounts payable staff to send an ACH payment of nearly $50,000. Microsoft says the templates showed signs of generative AI use.

Read the full story

]]> Anthropic threat report details Russian spies and scammers misusing Claude in 7 harm areashttps://techailatest.news/cybersecurity/anthropic-threat-report-claude-misuse-cyber-operationshttps://techailatest.news/cybersecurity/anthropic-threat-report-claude-misuse-cyber-operationsThu, 10 Sep 2026 09:00:00 GMTTech AI LatestCybersecurityAnthropic's September 2026 threat report covers cases it disrupted from December 2025 to August 2026, including AI-run espionage and a 20-app dating scam.Anthropic published its threat intelligence report on 10 September 2026. It covers misuse of Claude that Anthropic disrupted between December 2025 and August 2026 across seven harm areas, from cyber operations to scams and illicit distillation. Cases include a Russian espionage actor using AI workflows to rebuild detected malware, ShinyHunters affiliates scanning 1.8 million Android apps for secrets, and a China-based studio running over 4,700 Claude personas across 20 dating apps.

Read the full story

]]> Google threat report says attackers prompt-inject AI coding assistants and run agent campaignshttps://techailatest.news/cybersecurity/google-gtig-ai-threat-tracker-agentic-attackshttps://techailatest.news/cybersecurity/google-gtig-ai-threat-tracker-agentic-attacksTue, 08 Sep 2026 14:00:00 GMTTech AI LatestCybersecurityGoogle threat analysts said on 8 September 2026 that attackers prompt-injected AI coding tools and ran an AI agent campaign in under six hours.Google Threat Intelligence Group published its AI Threat Tracker on 8 September 2026, covering the second quarter. It says the crime group UNC6780 hid prompt injection in project files to make AI coding assistants run malware, and planted extreme text to make LLM security scanners refuse analysis. One actor built and ran an agent-driven credential harvesting campaign in under six hours. Google also reports distillation campaigns above 100 million prompts against its models.

Read the full story

]]> Microsoft finds phishers reusing the ASCII smuggling prompt injection trick at scalehttps://techailatest.news/cybersecurity/microsoft-ascii-smuggling-unicode-tags-phishing-evasionhttps://techailatest.news/cybersecurity/microsoft-ascii-smuggling-unicode-tags-phishing-evasionThu, 03 Sep 2026 16:00:00 GMTTech AI LatestCybersecurityMicrosoft said on 3 September 2026 that phishers used invisible Unicode tag characters, a prompt injection trick, to split lure words and dodge filters.Microsoft researchers reported on 3 September 2026 that a finance-themed phishing campaign borrowed ASCII smuggling, a technique known from AI prompt injection research. Instead of hiding instructions for a model, the sender put invisible Unicode tag characters inside words such as funding to break keyword and classifier matches. Hits on Microsoft's signature jumped from about 21,000 to over 1.3 million on 9 February 2026 and peaked above 2.3 million messages on 11 February.

Read the full story

]]> CrowdStrike launches Falcon Guardian to find and police AI agents on company endpointshttps://techailatest.news/cybersecurity/crowdstrike-falcon-guardian-ai-agent-runtime-securityhttps://techailatest.news/cybersecurity/crowdstrike-falcon-guardian-ai-agent-runtime-securityTue, 01 Sep 2026 09:00:00 GMTTech AI LatestCybersecurityCrowdStrike introduced Falcon Guardian on 1 September 2026, an AI detection and response product that inventories AI agents and blocks unapproved ones.CrowdStrike announced Falcon Guardian on 1 September 2026 at its Fal.Con conference in Las Vegas. The company calls it an AI Detection and Response (AIDR) product that uses the Falcon endpoint sensor to find known and shadow AI agents on Windows and macOS, trace what they do, block unapproved agents and detect attacks on them. An AI gateway and managed services are promised later. Prices and general availability dates are not stated.

Read the full story

]]>